Personal Data Protection Law Privacy Notice

Bengisu Avcı places the highest importance on the security of your personal data and takes top-level security measures to protect them. In this awareness, all personal data are processed and retained in accordance with Law No. 6698 on the Protection of Personal Data (“KVK Law”).

The purpose of this notice is to inform you transparently, under Article 10 of the KVK Law, about how your personal data are obtained, the purposes of processing, the parties with whom they are shared, the legal grounds, and your rights, as presented by the data controller.

Your personal data may vary depending on the service, product or commercial activity concerned, and may be collected by automated or non-automated methods, verbally, in writing or electronically, through offices, branches, dealers, call centres, the website, social media channels, mobile applications and similar means. Your personal data may be created and updated for as long as you benefit from products and services.

In addition, your personal data may be processed when you use the call centre or website with the intention of using services, make a purchase, visit the site, or take part in organised events.

Your data are processed for purposes including delivering products and services; preparing records and documents; fulfilling information retention, reporting, notification, tax and other obligations under local and international legislation; improving service and product quality; assessing requests from public authorities and users; fulfilling legal obligations; carrying out order and payment transactions in e-commerce; arranging product delivery through third parties; recommending products and services; online advertising and marketing; and measuring service quality.

Collected personal data will be processed within the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVK Law, for purposes including carrying out the work needed for you to benefit from products and services; customising and recommending products and services according to preferences, usage habits and needs; ensuring legal and commercial security (administrative operations related to communication, physical security and audit, partner/customer/supplier evaluation, legal compliance, finance, etc.); determining and implementing commercial and business strategies; and conducting human resources policies.

Collected personal data may be transferred to business partners, suppliers, shareholders, and legally authorised public institutions and private persons within the processing conditions and purposes set out in Articles 8 and 9 of the KVK Law, for purposes including enabling you to benefit from products and services, offering personalised recommendations, ensuring legal and commercial security, determining commercial and business strategies, and conducting human resources policies.

Your personal data may also be transferred to third parties providing support abroad in areas such as storage, archiving, IT (server and internet infrastructure services, etc.) and security; to business partners with whom we cooperate and/or from whom we receive services; to other related parties where transfer is necessary for the stated purposes; and to competent authorities and institutions.

Where personal data are to be transferred abroad, it is assessed whether the destination country provides adequate legal protection, and whether the necessary measures are taken to protect the transferred data. If it is concluded that the data will not be kept secure, personal data will not be transferred abroad.

Your personal data will not be used for purposes other than those stated above, and will not be shared with or transferred to third parties except for legal obligations and official institutions/authorities.

Your personal data are obtained in any verbal, written or electronic medium so that products and services can be offered within the legal framework for the purposes set out above, and so that contractual and statutory responsibilities can be fulfilled fully and accurately.

Personal data collected on this legal basis may also be processed and transferred for the purposes set out in items (1) and (2) of this notice, within the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVK Law.

As data subjects, if you submit requests regarding your rights by the methods set out in this Privacy Notice, your request will be concluded free of charge within thirty days at the latest, depending on its nature. If the Personal Data Protection Board sets a fee, the fee in the published tariff may be charged.

In this context, data subjects have the rights to:

Learn whether personal data are processed,

Request information if personal data have been processed,

Learn the purpose of processing and whether data are used in line with that purpose,

Know the third parties to whom personal data are transferred in Türkiye or abroad,

Request correction if personal data are incomplete or inaccurate, and request that this be notified to third parties to whom the data were transferred,

Request deletion or destruction of personal data where the reasons for processing no longer exist even though processing was lawful under the KVK Law and other legislation, and request that this be notified to third parties to whom the data were transferred,

Object to a result against them arising solely from analysis of processed data by automated systems,

Claim compensation if they suffer damage due to unlawful processing of personal data.

Under Article 13(1) of the KVK Law, you may submit requests to exercise the rights above in writing or by other methods determined by the Personal Data Protection Board. Until the Board determines another method, applications must be made in writing.